$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/dfb09b85-cf08-36d7-b81f-0f42c2247693.roa File: dfb09b85-cf08-36d7-b81f-0f42c2247693.roa (raw, json) Hash identifier: MLhDPqm+dTqeqWxH9baI/e5eLk5Vd+T/s2QWIB0YEa8= Subject key identifier: 23:E1:6C:62:51:0D:1F:23:5A:71:51:D2:62:F3:7C:B6:22:3B:3F:7D Certificate issuer: /CN=14efeb6b-dc21-496a-a0be-e528a7d05944 Certificate serial: 010D0C9F4328584D1707EB0C1F76CF474B8AFEB0 Authority key identifier: 96:F2:95:2A:C9:87:B7:10:2B:5B:63:CB:83:6A:BF:F8:5C:A4:5F:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/dfb09b85-cf08-36d7-b81f-0f42c2247693.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 30523 IP address blocks: 209.40.84.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/14efeb6b-dc21-496a-a0be-e528a7d05944.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/14efeb6b-dc21-496a-a0be-e528a7d05944.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:eb:0c:1f:76:cf:47:4b:8a:fe:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14efeb6b-dc21-496a-a0be-e528a7d05944 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=9dcab693-e696-4d09-958f-4a859fcf5bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7d:e9:40:d8:34:7c:b7:5e:94:5d:5e:15:e9: 1d:dc:31:66:5d:32:59:2c:ba:97:3c:a6:8e:14:5a: 90:db:85:4d:ff:a1:e9:05:44:20:64:0a:9e:44:71: 44:c5:a0:b2:b5:1e:fe:57:25:35:a5:b6:80:58:54: 4d:83:bc:08:ae:95:69:37:e2:83:7a:b9:ba:4a:2a: 22:a2:f4:49:ab:5c:cd:bf:4d:7c:8b:bf:35:d1:65: db:d1:a6:12:56:8b:e2:3d:9f:b4:19:07:7f:a7:cf: a6:a7:be:aa:d1:dc:80:33:6f:c0:3a:9b:e4:0d:72: a9:78:3e:f9:0d:97:b5:ad:01:f1:4e:03:25:e1:79: 0a:96:88:52:4a:ff:f9:8c:6d:89:79:73:77:fb:96: 88:fa:45:28:97:6d:00:53:d7:40:e7:8f:2e:ed:f3: b7:1d:f6:da:8c:b3:e1:c6:26:a2:99:ed:da:21:b0: 63:1c:73:06:34:39:fd:0d:10:ca:87:9b:c4:8d:66: 47:de:e0:89:c3:41:19:1b:61:f4:0d:41:5a:46:b5: b2:90:46:6b:75:a8:b7:dc:9f:15:c3:a4:80:b9:15: 51:ae:7b:52:1a:f4:14:0f:ef:55:5b:5a:8a:6f:c4: 2b:dc:bc:50:ad:24:b1:2b:5e:e2:bd:0a:26:01:ab: 74:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E1:6C:62:51:0D:1F:23:5A:71:51:D2:62:F3:7C:B6:22:3B:3F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/dfb09b85-cf08-36d7-b81f-0f42c2247693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/14efeb6b-dc21-496a-a0be-e528a7d05944.crl X509v3 Authority Key Identifier: keyid:96:F2:95:2A:C9:87:B7:10:2B:5B:63:CB:83:6A:BF:F8:5C:A4:5F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944.cer sbgp-ipAddrBlock: critical IPv4: 209.40.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:48:5d:57:dd:0b:17:ce:f3:d4:fd:6c:b1:09:aa:7c:87:5b: aa:7a:e5:ec:63:8d:60:4b:5b:da:ee:49:39:ba:f0:68:67:8c: 42:97:76:50:a5:1f:57:4a:23:a3:e4:4d:c6:ac:67:62:69:9c: 2f:92:da:54:8b:45:32:74:f0:93:ef:08:2f:98:ef:26:95:77: 37:31:9f:05:31:7e:ab:cb:c4:b0:93:2d:d0:c2:3b:58:f3:fd: 51:a4:25:15:5c:41:52:3a:ba:cd:51:1a:d4:e5:95:e1:ea:17: 38:f4:0a:d1:4d:b4:d8:cf:1d:bf:e5:3c:3c:9f:0d:28:0f:2f: 63:46:be:45:b1:2b:0f:27:ad:90:60:fb:33:47:7b:ae:72:02: fe:6c:7f:7a:8a:e8:4f:ca:4f:af:16:5c:e8:cd:c2:0b:7d:6a: d6:e3:f5:08:fd:ae:c4:14:f6:8b:6d:13:b1:8f:43:66:0a:8b: d8:bb:c0:80:b4:21:3f:f2:b5:53:25:82:ad:da:1f:d7:5d:8a: f7:b1:bf:bc:e1:51:b7:1b:de:c0:c1:e8:62:86:fd:f4:72:e2: 54:ec:c9:b0:73:fd:ef:06:80:41:17:31:e3:ac:f0:d8:7a:5f: ae:66:3e:ea:a6:25:1c:4e:cb:8a:88:5b:77:f7:59:2c:85:eb: cc:9f:1b:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB+sMH3bPR0uK/rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTRlZmViNmItZGMyMS00OTZhLWEwYmUtZTUyOGE3ZDA1 OTQ0MB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk OWRjYWI2OTMtZTY5Ni00ZDA5LTk1OGYtNGE4NTlmY2Y1YmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn3pQNg0fLdelF1eFekd3DFmXTJZLLqXPKaO FFqQ24VN/6HpBUQgZAqeRHFExaCytR7+VyU1pbaAWFRNg7wIrpVpN+KDerm6Sioi ovRJq1zNv018i7810WXb0aYSVoviPZ+0GQd/p8+mp76q0dyAM2/AOpvkDXKpeD75 DZe1rQHxTgMl4XkKlohSSv/5jG2JeXN3+5aI+kUol20AU9dA548u7fO3HfbajLPh xiaime3aIbBjHHMGNDn9DRDKh5vEjWZH3uCJw0EZG2H0DUFaRrWykEZrdai33J8V w6SAuRVRrntSGvQUD+9VW1qKb8Qr3LxQrSSxK17ivQomAat07wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPhbGJRDR8jWnFR0mLzfLYiOz99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xNGVm ZWI2Yi1kYzIxLTQ5NmEtYTBiZS1lNTI4YTdkMDU5NDQvZGZiMDliODUtY2YwOC0z NmQ3LWI4MWYtMGY0MmMyMjQ3NjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMTRlZmViNmItZGMyMS00OTZhLWEw YmUtZTUyOGE3ZDA1OTQ0LzE0ZWZlYjZiLWRjMjEtNDk2YS1hMGJlLWU1MjhhN2Qw NTk0NC5jcmwwHwYDVR0jBBgwFoAUlvKVKsmHtxArW2PLg2q/+FykXyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xNGVmZWI2Yi1kYzIxLTQ5NmEtYTBiZS1lNTI4 YTdkMDU5NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ShUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpIXVfdCxfO89T9bLEJqnyHW6p65exjjWBLW9ruSTm68GhnjEKXdlCl H1dKI6PkTcasZ2JpnC+S2lSLRTJ08JPvCC+Y7yaVdzcxnwUxfqvLxLCTLdDCO1jz /VGkJRVcQVI6us1RGtTlleHqFzj0CtFNtNjPHb/lPDyfDSgPL2NGvkWxKw8nrZBg +zNHe65yAv5sf3qK6E/KT68WXOjNwgt9atbj9Qj9rsQU9ottE7GPQ2YKi9i7wIC0 IT/ytVMlgq3aH9ddivexv7zhUbcb3sDB6GKG/fRy4lTsybBz/e8GgEEXMeOs8Nh6 X65mPuqmJRxOy4qIW3f3WSyF68yfG0o= -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:46 2026 by rpki-client